Agent skill

Ceo As Risk Officer

by kangarooking in kangarooking/buffett-letters-skill

用户在分析企业风险管理、CEO职责边界,或评估组织是否真正重视风险控制时. An agent skill from kangarooking/buffett-letters-skill.

MITAuto-check passed

Install Ceo As Risk Officer

skills CLI
$ npx skills add kangarooking/buffett-letters-skill --skill ceo-as-risk-officer -a claude-code

Project install by default; add -g for ~/.claude/skills/.

GitHub CLI
$ gh skill install kangarooking/buffett-letters-skill ceo-as-risk-officer --agent claude-code

Project scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).

Manual copy
$ git clone --depth 1 https://github.com/kangarooking/buffett-letters-skill.git skills-src && mkdir -p .claude/skills && cp -r skills-src/ceo-as-risk-officer .claude/skills/ceo-as-risk-officer && rm -rf skills-src

Use ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.

Claude Code skills documentation · loads skills from .claude/skills/

Facts

Skill name
ceo-as-risk-officer
GitHub stars
102
Token cost
~370 tokens
SKILL.md length
94 words
Files
2
Skills in repo
12
Repo updated
First seen
Licence
MIT

At a glance

用户在分析企业风险管理、CEO职责边界,或评估组织是否真正重视风险控制时. An agent skill from kangarooking/buffett-letters-skill.

  • Works in 4 steps: 评估一家公司的风险管理是否到位 → 理解为什么大公司也会突然暴雷 → 设计组织架构时决定风险管理的汇报线 → …
  • SKILL.md covers R — 原文 (Reading), I — 方法论骨架, A1 — 书中的应用 and A2 — 触发场景, plus 4 more sections
  • Instructions only: no scripts, shell commands, URLs or credentials in SKILL.md

What it does

Ceo As Risk Officer is an agent skill from kangarooking/buffett-letters-skill. 用户在分析企业风险管理、CEO职责边界,或评估组织是否真正重视风险控制时。 语言信号:"风险管理应该谁来管"/"为什么要CEO亲自管风险"/"风控部门不够吗"/"CEO最大的责任是什么" 不适用于:不涉及组织风险管理的纯投资分析。

Its SKILL.md is about 370 tokens, which your agent loads only when the skill is triggered. The skill folder holds 1 other file (for example `test-prompts.json`).

The repository describes itself as: An AI skill pack for value investing, capital allocation, and behavioral discipline, distilled from Warren Buffett's 60+ years of shareholder letters. The licence is MIT.

Example prompts

  • “风险管理应该谁来管”
  • “为什么要CEO亲自管风险”
  • “风控部门不够吗”
  • “/ceo-as-risk-officer”

Workflow steps

4 steps, taken from the first numbered list in SKILL.md.

  1. 评估一家公司的风险管理是否到位
  2. 理解为什么大公司也会突然暴雷
  3. 设计组织架构时决定风险管理的汇报线
  4. 作为CEO/管理者反思自己的风险责任

What it can do on your machine

Read from SKILL.md and the folder at commit 5b1fbe1. It shows what the files ask for, not the result of running them.

  • Tool permissions

    Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.

    From allowed-tools in the SKILL.md frontmatter.

  • Runs code

    No scripts in the folder and no shell commands in SKILL.md.

    From the folder's file list and the shell code blocks in SKILL.md.

  • Network

    No URLs in SKILL.md.

    From URLs in SKILL.md, links to its own repository left out.

  • Credentials

    Names no API keys, tokens, secrets or passwords.

    From names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.

Context cost

Ceo As Risk Officer loads about 370 tokens when it runs. Until then it costs about 34 tokens; SKILL.md has 94 words of instructions outside code blocks.

Always · name and description, kept in context so the agent knows when to use it
~34
When it runs · the whole SKILL.md, loaded when a task matches
~370

Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.

Safety

Auto-check passed

The automated check found no risky patterns in SKILL.md.

Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.

SKILL.md

The full file from kangarooking/buffett-letters-skill at commit 5b1fbe1, republished under its MIT licence (© kangarooking). 94 words, ~370 tokens.

Download SKILL.mdSave it as .claude/skills/ceo-as-risk-officer/SKILL.md (or your agent's skills folder). This skill also uses 1 other file; get the full folder from GitHub.
name
ceo-as-risk-officer
description
用户在分析企业风险管理、CEO职责边界,或评估组织是否真正重视风险控制时。 语言信号:"风险管理应该谁来管"/"为什么要CEO亲自管风险"/"风控部门不够吗"/"CEO最大的责任是什么" 不适用于:不涉及组织风险管理的纯投资分析。
source_book
《巴菲特致股东的信》 沃伦·巴菲特
source_chapter
2009年信 / 2022年信 / 2001年信
tags
risk-management, ceo, governance, preparedness
related_skills
no-leverage, institutional-imperative

CEO = 首席风险官(含诺亚法则)

R — 原文 (Reading)

"The CEO of any large organization must be the Chief Risk Officer." (2022) "Noah did not wait for it to rain before building the ark." (2001)

I — 方法论骨架

CEO的风险责任不可委托:

  • 风险管理不是独立部门的工作——CEO必须亲自理解和管理风险
  • "预测下雨不算,造船才算"——知道风险存在但不行动等于没有管理
  • 委员会报告≠风险已管理——只有CEO能调动全组织资源应对
  • 伯克希尔模式:保持$300亿+现金、不用杠杆、不依赖陌生人善意

A1 — 书中的应用

案例: NetJets危机
  • 问题: NetJets在2009年面临生存危机,亏损严重
  • 使用: 巴菲特被迫亲自接管,发现风险失控根因是管理层未将风险视为首要责任
  • 结果: 深刻认识到"CEO绝不能委托风险控制"——亲自管理后扭转局面

A2 — 触发场景

  1. 评估一家公司的风险管理是否到位
  2. 理解为什么大公司也会突然暴雷
  3. 设计组织架构时决定风险管理的汇报线
  4. 作为CEO/管理者反思自己的风险责任
语言信号
  • "风控部门管风险不就行了吗?"
  • "CEO该亲自管风险吗?"
  • "为什么大公司会暴雷?"
  • "风险管理该怎么做?"

E — 可执行步骤

  1. 检查CEO是否亲自管风险

    • 完成标准:CEO能否准确描述公司最大的3个风险?是否定期审查?
  2. 做"诺亚测试"

    • 完成标准:公司是否在晴天时就为暴雨做准备?还是等到下雨才行动?
  3. 验证"不依赖陌生人"

    • 完成标准:在最坏情况下,公司是否不需要任何外部融资就能存活?

B — 边界

  • CEO亲自管风险≠微观管理——需要建立系统但最终责任不可下放
  • 中小企业CEO可能没有资源做全面风险管理——但核心风险仍需亲力亲为
  • 作者盲点:巴菲特管理的是一个超大资本基座的公司——普通CEO面临的风险类型和压力完全不同

相关 skills (阶段 3 填充)

  • composes-with: no-leverage, institutional-imperative

审计信息

  • 验证通过: V1 ✓ / V2 ✓ / V3 ✓
  • 蒸馏时间: 2026-04-16

© kangarooking, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file

Files

SKILL.md and 1 other file in ceo-as-risk-officer of kangarooking/buffett-letters-skill.

  • SKILL.md
  • test-prompts.json

Open the folder on GitHubat commit 5b1fbe1

Compare with similar skills

Ceo As Risk Officer next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.

Ceo As Risk Officer compared with similar skills
SkillStarsUsed inTokensAuto-checkLicenceRepo updated
Ceo As Risk Officer this skillkangarooking/buffett-letters-skill102—~370Automated safety check: PassMIT
Chief Legal And Risk Officercbrock84/headcount2k—~1.6kAutomated safety check: PassMIT
Riskalsk1992/CloddsBot3k—~2.4kAutomated safety check: PassMIT
Trader Riskruvnet/ruflo74k—~358Automated safety check: NotesMIT
Risk Management Specialistalirezarezvani/claude-skills28k1 repos~4.1kAutomated safety check: PassMIT
Conducting Cyber Risk Assessment With Nist 800 30mukul975/Anthropic-Cybersecurity-Skills34k—~2.5kAutomated safety check: PassApache-2.0

Similar skills

  • Owns legal, contracts, intellectual property, regulatory compliance, privacy, security governance, enterprise risk, and audit readiness.

    2k GitHub stars~1.6k tokensUpdated 23 days ago
    Legal & ComplianceAuto-check passed
  • Risk

    alsk1992/CloddsBot

    Unified risk engine with VaR, stress testing, volatility regimes, and automated controls

    3k GitHub stars~2.4k tokensUpdated 8 days ago
    Testing & QAAuto-check passed
  • Trader Risk

    ruvnet/ruflo

    Assess portfolio risk using npx neural-trader — VaR, CVaR, Sharpe, position sizing, circuit breaker status

    74k GitHub stars~358 tokensUpdated yesterday
    Auto-check: notes
  • Risk Management Specialist

    alirezarezvani/claude-skills

    Medical device risk management specialist implementing ISO 14971 throughout product lifecycle.

    28k GitHub starsUsed in 1 repo~4.1k tokens
    Legal & ComplianceAuto-check passed
  • Conducting Cyber Risk Assessment With Nist 800 30

    mukul975/Anthropic-Cybersecurity-Skills

    Conduct a defensible cybersecurity risk assessment using the NIST SP 800-30 Rev 1 methodology: prepare scope and a risk model, identify threat sources and threat events, identify vulnerabilities and…

    34k GitHub stars~2.5k tokensUpdated 1 mo ago
    Legal & ComplianceAuto-check passed
  • Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk.

    276k GitHub starsUsed in 1 repo~471 tokens
    Data & AnalyticsAuto-check passed

More from kangarooking/buffett-letters-skill

All 12 skills in this repo
  • Aesop Three Questions

    kangarooking/buffett-letters-skill

    用户需要评估一个资产/投资/项目的价值,或纠结某个东西"值不值"时。适用于任何能产生(或不产生)现金流的资产评估. An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~645 tokensUpdated 5 mo ago
    Auto-check passed
  • Cigar Butt Vs Great Business

    kangarooking/buffett-letters-skill

    用户在选择投资标的或商业模式时,纠结于"便宜买差企业"还是"合理价买好企业". An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~481 tokensUpdated 5 mo ago
    Auto-check passed
  • Circle Of Competence

    kangarooking/buffett-letters-skill

    用户在做决策时不确定自己是否真的理解某个领域,或准备进入一个看似熟悉但缺乏验证记录的领域时. An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~693 tokensUpdated 5 mo ago
    Auto-check passed
  • Economic Moat

    kangarooking/buffett-letters-skill

    用户需要评估一个企业的长期竞争力和定价权——它能否在极少额外资本下持续增长利润. An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~502 tokensUpdated 5 mo ago
    Auto-check passed
  • Fear And Greed

    kangarooking/buffett-letters-skill

    用户面对市场极端情绪时需要做出逆向来决策。当所有人都在买入/卖出、市场处于极端乐观/悲观时. An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~493 tokensUpdated 5 mo ago
    Auto-check passed
  • Mr Market

    kangarooking/buffett-letters-skill

    用户在市场波动中情绪受到影响,或试图从市场价格变动中获取信息而非从企业分析中获取信息时. An agent skill from kangarooking/buffett-letters-skill.

    102 GitHub stars~714 tokensUpdated 5 mo ago
    Auto-check passed

Questions about Ceo As Risk Officer

What does Ceo As Risk Officer do?

用户在分析企业风险管理、CEO职责边界,或评估组织是否真正重视风险控制时. An agent skill from kangarooking/buffett-letters-skill. Ceo As Risk Officer is an agent skill from kangarooking/buffett-letters-skill.

How do I install Ceo As Risk Officer in Claude Code?

Run `npx skills add kangarooking/buffett-letters-skill --skill ceo-as-risk-officer -a claude-code`. Or copy the skill folder (ceo-as-risk-officer in kangarooking/buffett-letters-skill) into .claude/skills/ceo-as-risk-officer in your project. Claude Code loads it when a task matches its description.

How do I install Ceo As Risk Officer in Codex?

Run `npx skills add kangarooking/buffett-letters-skill --skill ceo-as-risk-officer -a codex`. Or copy the skill folder (ceo-as-risk-officer in kangarooking/buffett-letters-skill) into .agents/skills/ceo-as-risk-officer in your project. Codex loads it when a task matches its description.

Can I use Ceo As Risk Officer in Cursor, Gemini CLI or GitHub Copilot?

Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add kangarooking/buffett-letters-skill --skill ceo-as-risk-officer -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/ceo-as-risk-officer, .gemini/skills/ceo-as-risk-officer, .github/skills/ceo-as-risk-officer and .opencode/skills/ceo-as-risk-officer in your project.

What does Ceo As Risk Officer need to run?

SKILL.md names no scripts, command-line tools or credentials: Ceo As Risk Officer is instructions for the agent only.

Does Ceo As Risk Officer access the network?

SKILL.md contains no URLs. Any network use would come from the scripts or tools the agent runs. This is read from the text; nothing was executed.

Is Ceo As Risk Officer safe to install?

Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.

What licence does Ceo As Risk Officer use?

Ceo As Risk Officer is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.

How many tokens does Ceo As Risk Officer use?

About 370 tokens (SKILL.md is roughly 1.5k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.

What are the alternatives to Ceo As Risk Officer?

Skills that share tags, products or a category with Ceo As Risk Officer: Chief Legal And Risk Officer (cbrock84/headcount, 2k stars), Risk (alsk1992/CloddsBot, 3k stars), Trader Risk (ruvnet/ruflo, 74k stars) and Risk Management Specialist (alirezarezvani/claude-skills, 28k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.

Who maintains Ceo As Risk Officer?

kangarooking (a GitHub user) maintains it in kangarooking/buffett-letters-skill, which has 102 GitHub stars. The repository holds 12 skills in this directory. The repository was last updated on April 17, 2026.

Source: kangarooking/buffett-letters-skill on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.